Privacy Policy

Versão em português (the Portuguese version prevails in case of discrepancy).

This policy explains how Vikora, a platform operated by [RAZÃO SOCIAL] (CNPJ [CNPJ]), Parnamirim/RN, Brazil, processes personal data of running clubs (“coaching groups”), coaches and athletes, in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018, “LGPD”).

1. Who is responsible

Each coaching group that subscribes to Vikora decides which athletes to register and how to follow them. For athletes' data, the coaching group is the controller and Vikora acts as processor on its behalf. For the account data of the coaching groups themselves, Vikora is the controller.

2. Data we process

• Account: name, e-mail, phone, date of birth, photo and the coaching group the user belongs to.
• Sports profile: goals, injury history and other health information entered by the athlete or coach, used only to plan training safely.
• Training: prescribed workouts, completed workouts (distance, time, pace, perceived effort, comments) and gamification achievements.
• Messages exchanged in the app chat.
• Connected devices (such as Garmin watches), only if the athlete authorizes the connection. See section 5.
• Technical data: access logs (date, time, IP address) required by Brazilian law, and one session cookie.

3. Why we use it

• To let the coach prescribe, adjust and follow the athlete's training.
• To record completed workouts and compute progress, points, levels and achievements.
• To send in-app notices and messages.
• To keep accounts secure and comply with legal obligations.

4. Who can see the data

• The athlete's own coach and coaching-group managers see the athlete's workouts, records, sports profile and activities imported from connected devices.
• Other athletes only see the first name and last initial, the position in the weekly points ranking and messages posted in group chats. They never see workouts, pace, heart rate, maps or health data.
• Infrastructure providers (hosting, database and e-mail delivery) that process data only to operate Vikora, under confidentiality agreements.
• Authorities, only when required by law or court order.

We do not sell personal data, and we do not use it for advertising or to train artificial intelligence models.

5. Garmin integration

If an athlete connects their Garmin Connect account to Vikora:

• What we send to Garmin: the structured workouts prescribed by the coach (warm-up, intervals, pace and heart-rate targets), so they appear in the Garmin Connect calendar and sync to the watch.
• What we receive from Garmin: activities recorded on the watch (type, date, distance, duration, pace, heart rate, cadence, laps and route), to mark workouts as completed and show the coach how the session went.
• Garmin data is used only for these purposes and is visible only to the athlete, their coach and their coaching-group managers, never to other athletes. It is not shared with analytics, advertising, machine-learning or AI services.
• The athlete can disconnect Garmin at any time in their Vikora profile or in Garmin Connect settings. On disconnection we stop sending workouts and receiving activities and delete the access tokens. The athlete may also request deletion of activities already imported.
• Garmin's own processing is governed by the Garmin privacy policy.

6. International transfer

Some providers, such as Garmin and hosting services, may process data outside Brazil. In these cases we adopt the safeguards of article 33 of the LGPD.

7. Retention

We keep data while the user is linked to a coaching group on Vikora. When the link ends, the coaching group or the user may request deletion. Access logs are kept for 6 months, as required by the Brazilian Internet Civil Framework. Data needed for legal obligations may be kept for the period required by law.

8. Security

We use encrypted connections (HTTPS), hashed passwords, encrypted storage of third-party credentials, isolation of each coaching group's data and role-based access control (athlete, coach, manager). If a relevant incident occurs, we will notify affected users and the Brazilian Data Protection Authority (ANPD).

9. Your rights

Under the LGPD (art. 18) you may confirm and access your data, correct it, request anonymization, blocking or deletion, request portability, revoke consent (such as the Garmin connection) and know with whom we share your data. Write to [email protected]. We reply within 15 days.

10. Minors

Athletes under 18 may only be registered with the consent of a parent or legal guardian, collected by the coaching group.

11. Cookies

We use only one essential session cookie and a local theme preference. We do not use advertising or tracking cookies.

12. Changes

We may update this policy. Significant changes will be announced inside Vikora.